Pass The Role (Who Holds The Keys)

[Intro] Yeah, deep sub, half-time drums Listen close, this is how it comes [Verse 1] I can't touch the vault, my hands are tied But I can hand the keys to code I drive I supply the function, I pick the role Then it runs with powers I don't hold No password, no credentials in my palm Just a workload crossing over, calm and calm [Chorus] Pass the role, pass the role Don't confuse the using with the arranging, bruv Pass the role, pass the role Scope the ARN or the boundary goes away Ask who's allowed to pick the keys Before the workload wears the throne for free [Verse 2] AWS wants three checks in a line An Allow on PassRole, trust that's fine Same account, no boundary getting round But service trust don't decide who's allowed to choose Google's actAs hands the account over So name the service accounts before you're sober Restrict the destination, tie the resource down Review who creates the roles inside the town [Bridge] Creation ain't proof the setup's sound Test the delegation, check it's usable ground Deployment control plus a stronger identity That's the combination, that's the gravity [Chorus] Pass the role, pass the role Don't confuse the using with the arranging, bruv Pass the role, pass the role Scope the ARN or the boundary goes away Ask who's allowed to pick the keys Before the workload wears the throne for free [Outro] Lock the passing, not just the seat Every pass deserves the same heat Yeah, deep sub, half-time drums Scope it tight, the fix has come